Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa
File:                     3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa (raw, json)
Hash identifier:          f6JRpvavOOBieMm8AalekWhsSWWqoLQnyenTzoE2Il0=
Subject key identifier:   1A:DC:3B:08:12:72:67:80:D2:1E:F4:13:80:EC:B1:D8:BF:0A:BC:15
Certificate issuer:       /CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
Certificate serial:       71E8CCF0EBC081046A89A1E5CD51DB42B18B090E
Authority key identifier: 38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa
Signing time:             Thu 04 Apr 2024 07:21:08 +0000
ROA not before:           Thu 04 Apr 2024 07:16:08 +0000
ROA not after:            Thu 03 Apr 2025 07:21:08 +0000
asID:                     265935
IP address blocks:        164.163.23.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl
                          rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sat 23 Nov 2024 10:38:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:e8:cc:f0:eb:c0:81:04:6a:89:a1:e5:cd:51:db:42:b1:8b:09:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F3BEAC575D6B67BF2F286328C680C4467F5BD3
        Validity
            Not Before: Apr  4 07:16:08 2024 GMT
            Not After : Apr  3 07:21:08 2025 GMT
        Subject: CN=1ADC3B0812726780D21EF41380ECB1D8BF0ABC15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ee:d1:2e:1b:93:bb:00:74:dd:e2:58:b7:58:
                    1f:f8:31:a2:25:e8:23:8e:82:3e:1f:06:8e:2a:e0:
                    ae:c0:77:00:31:3c:e5:37:ca:db:c5:64:a6:44:63:
                    56:c7:e8:ea:85:2e:ec:7c:56:9e:bf:09:14:6d:4b:
                    43:3e:a8:d3:dc:a7:0e:79:cc:d8:7a:bb:28:a2:66:
                    6f:37:0a:8f:6e:e0:d1:c0:eb:4b:ab:ba:de:3a:c7:
                    bd:54:dd:90:1b:93:16:95:d4:83:75:88:24:42:b0:
                    9d:26:61:81:18:30:7a:fe:3d:6f:35:cb:aa:9b:7a:
                    25:a6:a5:a7:21:80:96:37:80:fd:62:77:72:e6:f2:
                    99:32:60:98:77:cc:62:0d:58:7a:73:7a:72:c7:78:
                    e2:96:6c:65:80:67:4f:e3:b8:5a:06:47:0c:94:2c:
                    7f:73:c4:0f:04:77:e0:c7:3d:1e:27:60:0a:5f:d8:
                    05:2d:a4:9d:97:7d:75:61:cd:46:48:f4:df:8f:fb:
                    8a:05:3c:0f:a6:b5:b4:7b:a4:36:0e:92:f7:9c:06:
                    85:07:4e:92:79:3e:82:22:33:1b:d2:68:2c:78:06:
                    6e:95:13:af:c6:44:f5:e2:c1:bf:a1:48:9f:0e:90:
                    ed:8c:87:42:d9:1c:4c:3d:6e:1f:a3:a0:ca:a2:b8:
                    b0:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:DC:3B:08:12:72:67:80:D2:1E:F4:13:80:EC:B1:D8:BF:0A:BC:15
            X509v3 Authority Key Identifier:
                keyid:38:F3:BE:AC:57:5D:6B:67:BF:2F:28:63:28:C6:80:C4:46:7F:5B:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/38F3BEAC575D6B67BF2F286328C680C4467F5BD3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3b7beZwLbTjTB3GPRtBhzMRzWxEnYMBYGVMAtsEzwP6j/1/3136342e3136332e32332e302f32342d3234203d3e20323635393335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:09:0d:83:16:7a:fa:fa:1e:b4:d8:c6:69:57:83:4d:a8:
         d7:31:98:8c:2d:33:dd:27:22:d1:1a:41:00:95:c1:ee:5b:de:
         e8:61:05:a4:e9:b1:73:8f:22:ba:ff:e0:2d:55:cb:b2:d4:39:
         bd:70:b9:2a:f4:ad:05:9a:0d:4d:05:2b:27:3f:5f:c0:01:ea:
         14:11:da:a4:f3:42:83:65:fc:92:a2:cc:c3:52:77:98:53:2c:
         78:12:1b:a6:d9:bd:6a:41:81:5f:3a:4e:3a:b8:22:fa:e3:46:
         75:0d:4e:de:81:23:bd:13:c8:1f:22:91:4a:4c:38:5f:df:b6:
         0e:fb:bd:76:2e:75:e6:b1:c9:c3:0d:af:43:f7:bd:38:08:62:
         5c:b9:54:1e:c9:3e:6c:44:c9:f4:56:7c:fe:21:16:50:29:fa:
         0f:22:dd:92:7e:20:36:98:6e:47:43:02:82:b5:f2:71:a0:b1:
         4d:01:4e:ba:70:7d:ff:80:56:88:89:74:7d:87:27:cd:96:59:
         ee:9d:89:48:94:d0:ae:57:87:c8:5f:2c:58:ac:09:5c:49:2f:
         d1:05:41:41:9a:69:1e:79:3e:fa:e1:73:38:fe:6f:8f:63:05:
         92:79:03:99:c5:0c:db:32:cc:48:c0:db:a6:44:19:a8:d8:67:
         b7:f7:df:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:06 2024 by rpki-client on console-fra.rpki-client.org